PT-2014-8294 · Linux+5 · Linux Kernel+5

Published 2014-11-10 · Updated 2023-02-13 · CVE-2014-7826

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 3.17.2

Description The issue allows local users to gain privileges or cause a denial of service due to an invalid pointer dereference. This occurs when the ftrace subsystem is used and private syscall numbers are not handled properly.

Recommendations For Linux kernel versions through 3.17.2, update to a version that contains a fix for this issue to prevent local users from gaining privileges or causing a denial of service.

Exploit

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2014-2361

ALT-PU-2014-2362

CESA-2015_0290

CESA-2015_0864

CVE-2014-7826

OPENSUSE-SU-2014_1669-1

OPENSUSE-SU-2014_1677-1

OPENSUSE-SU-2014_1678-1

RHSA-2014:1943

RHSA-2015:0290

RHSA-2015:0864

RHSA-2015_0290

RHSA-2015_0864

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2443-1

USN-2444-1

USN-2445-1

USN-2446-1

USN-2447-1

USN-2447-2

USN-2448-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 46

• 🔥 https://github.com/torvalds/linux/commit/086ba77a6db00ed858ff07451bedee197df868c9 · Exploit
• 🔥 https://github.com/RKX1209/CVE-2014-9322 · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=086ba77a6db00ed858ff07451bedee197df868c9 · Exploit
• https://linux.oracle.com/errata/ELSA-2015-3013.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-7970 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-3687 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2444-1 · Vendor Advisory
• http://openwall.com/lists/oss-security/2014/11/06/11 · Patch
• https://ubuntu.com/security/CVE-2014-3673 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-9090 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2015-0290.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-8086 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-7826 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2447-1 · Vendor Advisory